Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File:                     hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier:          j8TsWbrXUse8PoC43nwNLdMH0Dcounglk+F2IQKR5Jc=
Subject key identifier:   79:D2:6B:10:B0:33:56:8C:52:B3:04:9A:72:3D:F2:27:0C:55:B7:FD
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer:       /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial:       01962F3D8D43A6B443557C54F0395E7C8D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number:          08FE
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: /Kj0y5UTXaix0h+yDKdeI9pfKpwOsSE1DB8ejY2GvLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:43:a6:b4:43:55:7c:54:f0:39:5e:7c:8d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=79d26b10b033568c52b3049a723df2270c55b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:21:6b:92:a9:04:f1:3d:d1:77:b4:c8:46:
                    6a:1d:5b:31:fa:47:20:76:ee:dc:dd:b6:be:0e:37:
                    e0:c9:bf:97:ae:17:4e:b3:88:62:5a:51:3b:3e:27:
                    16:d4:0a:6f:e5:8d:a1:d7:cd:fd:69:dd:48:89:8b:
                    cc:38:69:98:9a:4b:92:96:b7:c8:d8:ca:55:24:a2:
                    b5:59:05:9c:bb:8e:3d:d5:c6:67:74:b6:96:7b:a3:
                    85:7e:02:9a:fd:08:f7:ea:79:16:c1:a8:b0:5f:a4:
                    21:62:2a:a0:dc:9b:5b:d4:71:05:b8:76:01:78:4d:
                    f5:84:74:3c:49:9e:25:5c:de:b8:2e:e6:8c:33:5d:
                    d7:e5:04:72:04:95:a3:48:b2:d1:e6:e0:f1:91:5f:
                    99:0b:d9:e8:44:43:28:f7:6f:2a:f9:9f:19:cf:83:
                    a5:2f:3f:0e:44:5b:83:b5:c7:21:f4:97:1d:c5:eb:
                    aa:f7:36:ea:25:14:7c:4a:9e:42:f7:e8:27:cf:ce:
                    6d:85:d4:90:f6:62:d2:e7:4b:60:a8:3e:0c:de:9e:
                    93:49:4f:05:2c:68:aa:e4:5f:73:f7:71:0b:2f:39:
                    ef:15:22:22:c6:16:30:20:17:d3:7c:1c:a6:49:25:
                    07:1f:f7:2e:53:38:eb:d3:e2:29:f4:1b:7b:ca:a1:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:6B:10:B0:33:56:8C:52:B3:04:9A:72:3D:F2:27:0C:55:B7:FD
            X509v3 Authority Key Identifier:
                keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:6f:8c:e2:e0:63:88:81:78:50:d0:f1:5d:71:1a:4e:9f:
         4c:47:cf:cd:57:b1:66:92:c5:ed:ff:66:ba:47:86:76:dc:d1:
         31:11:98:cd:e8:a7:d1:b3:87:be:e6:48:f5:7a:a7:75:bb:b8:
         f9:cb:be:1e:3a:48:e4:b8:9c:f8:01:e6:1b:d2:a6:29:15:5a:
         c5:79:bd:65:f2:03:66:df:0c:45:f6:38:c5:6e:45:e9:f1:28:
         b0:b1:d2:8f:26:01:2d:c7:f9:1f:51:cd:17:60:73:59:da:9c:
         f0:bc:ea:2f:21:6f:8b:21:9d:0c:65:3d:85:2e:dd:cb:03:ed:
         2e:61:d4:a4:bf:1d:13:20:71:30:3a:e4:a2:b7:c5:88:a2:17:
         dc:d3:50:6e:9a:2d:a5:a3:4f:c9:08:af:2a:ec:6a:59:a9:67:
         53:8b:75:3c:95:50:b0:8b:4e:aa:e8:ce:0c:be:44:4f:6c:71:
         a0:f7:5b:80:04:e6:6d:e3:73:6f:d5:08:17:c7:1d:09:ce:9b:
         d8:fc:ad:b1:7f:2f:82:70:35:43:83:13:fb:fa:7a:88:a1:16:
         70:65:2e:b9:0c:a2:70:6a:d7:34:e3:83:cd:a8:a0:93:f4:e4:
         b2:b2:dd:3a:8a:97:15:15:42:c3:23:f4:e6:c4:1b:71:27:60:
         ac:fd:0b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPY1DprRDVXxU8DlefI1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjU5MGNhNjJjMjQ2NDQwNTgzODE4YzMxZjI1NzNhMGY1
MGZmZDAwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
Eyg3OWQyNmIxMGIwMzM1NjhjNTJiMzA0OWE3MjNkZjIyNzBjNTViN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAha5KpBPE90Xe0yEZqHVsx+kcg
du7c3ba+Djfgyb+XrhdOs4hiWlE7PicW1Apv5Y2h1839ad1IiYvMOGmYmkuSlrfI
2MpVJKK1WQWcu4491cZndLaWe6OFfgKa/Qj36nkWwaiwX6QhYiqg3Jtb1HEFuHYB
eE31hHQ8SZ4lXN64LuaMM13X5QRyBJWjSLLR5uDxkV+ZC9noREMo928q+Z8Zz4Ol
Lz8ORFuDtcch9Jcdxeuq9zbqJRR8Sp5C9+gnz85thdSQ9mLS50tgqD4M3p6TSU8F
LGiq5F9z93ELLznvFSIixhYwIBfTfBymSSUHH/cuUzjr0+Ip9Bt7yqHwswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnSaxCwM1aMUrMEmnI98icMVbf9MB8GA1UdIwQY
MBaAFIT1kMpiwkZEBYOBjDHyVzoPUP/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEt
OGQ1NmE3YjA5OTUzLzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEtOGQ1NmE3YjA5OTUz
LzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIVvjOLg
Y4iBeFDQ8V1xGk6fTEfPzVexZpLF7f9mukeGdtzRMRGYzein0bOHvuZI9Xqndbu4
+cu+HjpI5Lic+AHmG9KmKRVaxXm9ZfIDZt8MRfY4xW5F6fEosLHSjyYBLcf5H1HN
F2BzWdqc8LzqLyFviyGdDGU9hS7dywPtLmHUpL8dEyBxMDrkorfFiKIX3NNQbpot
paNPyQivKuxqWalnU4t1PJVQsItOqujODL5ET2xxoPdbgATmbeNzb9UIF8cdCc6b
2PytsX8vgnA1Q4MT+/p6iKEWcGUuuQyicGrXNOODzaigk/TksrLdOoqXFRVCwyP0
5sQbcSdgrP0L2Q==
-----END CERTIFICATE-----